Tag archive
Vault is the trust root every ExternalSecret reads from. Its namespace had zero NetworkPolicies — any pod in the cluster could reach it. The investigation also uncovered a class of ArgoCD drift that silently ignores merged changes.
Why using Vault is better to manage your secrets? In modern containerized infrastructures, managing...
Vault deployments usually start small, a handful of services pulling secrets. As adoption grows, more...
HashiCorp put a Kubernetes KMS v2 plugin for Vault Enterprise into public beta, letting the API server encrypt etcd through the same Vault install that already holds pipeline secrets. It collapses one more custody trail; it does not lower the operational burden on the API server side.
HashiCorp put cluster disaster recovery for HCP Vault Dedicated into public preview, giving teams a way to simulate cluster-level failures and prove their failover path. The drill is gated through HashiCorp support, not the customer's own runbook.
HashiCorp Vault Enterprise has put a new authorization model for AI agents into public preview, built on OAuth 2.0 Rich Authorization Requests so agents must declare what they want on every call instead of inheriting long-lived secrets. For pipelines that now host coding agents, it changes who is allowed to do what at runtime.
Modern applications depend on secrets. Every application requires: Database Passwords API Keys SSH...
HashiCorp Vault for DevOps: Dynamic Secrets, PKI, and Zero-Trust Infrastructure Static...
For about five years or so, I've reverse-engineered my way through building Vault secrets engines...
Learn how to debug Vault secrets management issues with our comprehensive guide, troubleshoot common problems and get your secrets flowing smoothly
Building Cross Project Knowledge Base for the AI Era with Vault System Project imitation learning is becoming mainstr...
Hashicorp Vault provides many features, and the secure storage of encrypted data and secrets is at...